Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f93994c6-3484-3a79-972b-d2b611a7e799.roa
File:                     f93994c6-3484-3a79-972b-d2b611a7e799.roa (raw, json)
Hash identifier:          DZGE/5HPUPE2VRHTMNr+N3qMLFHej2IfU3BEPmmMRIo=
Subject key identifier:   50:BE:A0:87:5B:F3:04:82:BB:16:2B:A1:B1:2E:FF:9C:1E:A8:8F:1F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285849A61F32673AD5619337C3C3B8
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f93994c6-3484-3a79-972b-d2b611a7e799.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     30036
IP address blocks:        173.21.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:32:67:3a:d5:61:93:37:c3:c3:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=f9102e81-3b31-44c4-a6f4-8a1ee5fb3e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:44:64:d3:50:e7:a2:d7:82:91:a3:3e:df:40:
                    9d:cf:68:ae:99:aa:af:4e:6e:3e:8f:66:d7:d7:11:
                    5b:90:c1:8c:93:5d:13:bd:fc:37:5d:fa:6f:7a:3e:
                    3a:a0:36:82:16:38:3b:94:2b:fe:75:06:ab:eb:ea:
                    4b:7c:f4:f9:84:e5:00:38:69:98:d6:e3:c9:c4:bf:
                    05:7c:c6:81:f5:0f:23:14:cb:6f:d2:4b:ac:02:7e:
                    05:2d:7b:f2:c7:0c:ad:6f:87:d5:d1:a1:9a:7c:81:
                    be:88:f4:73:fc:cd:13:4e:e6:88:ea:b0:eb:df:4f:
                    d3:14:93:0a:f5:db:51:b6:9f:04:a0:5d:04:6c:38:
                    45:3a:b2:b7:97:22:37:25:8b:94:73:8f:96:fd:ab:
                    1d:f7:3d:07:a2:5e:86:7b:80:26:aa:d3:ef:58:81:
                    31:ff:11:31:50:31:64:95:6a:15:fb:11:8d:42:e2:
                    fb:37:61:ad:b9:3f:e4:e4:0d:7e:db:6f:95:cb:92:
                    19:0d:bb:9d:a7:90:dd:a5:be:6d:ad:53:6a:8c:3a:
                    1c:dc:cd:09:62:9f:ca:72:3d:45:79:da:96:3f:90:
                    fe:bc:09:54:40:1d:34:bc:04:28:77:11:b5:b4:be:
                    c0:b9:5d:fb:07:01:cb:df:3d:cf:f3:be:e8:55:14:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BE:A0:87:5B:F3:04:82:BB:16:2B:A1:B1:2E:FF:9C:1E:A8:8F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f93994c6-3484-3a79-972b-d2b611a7e799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:89:61:72:2c:e6:30:77:fe:c6:1f:f5:fd:e4:7b:ad:88:
         ca:52:dd:be:e8:0d:f1:11:69:61:1f:6d:36:67:87:d4:12:5f:
         64:82:b4:7a:c1:8c:c2:df:95:95:f2:6f:16:ad:bd:e3:ba:ff:
         d3:1f:8f:0d:12:d4:8b:6a:3f:9d:76:f0:56:92:52:6e:9b:a2:
         d3:2b:1a:51:66:f9:5a:3e:56:83:8d:9c:fb:bf:80:83:24:07:
         c5:f9:5c:84:bf:d5:61:e8:0c:03:88:58:59:68:3a:f5:42:d6:
         01:bb:23:ab:7d:24:54:0f:05:5d:bc:a9:ef:09:d1:77:53:7d:
         41:3d:13:7c:45:ac:74:af:17:07:62:45:4a:44:20:e1:99:36:
         06:3e:c7:17:de:dc:19:b0:f4:a7:1c:78:2a:63:79:57:b0:af:
         cc:2f:b1:c0:6c:b4:c8:29:13:b0:99:7c:07:85:61:87:22:d2:
         79:31:ac:96:0e:05:57:d7:bb:5c:1b:54:0b:7f:f5:d1:a4:a2:
         6a:9a:c8:33:8c:ea:bb:e6:95:fc:b8:27:72:fd:b3:78:3f:1c:
         af:06:62:ff:fd:df:b4:b9:2f:a9:ff:2b:60:21:24:65:c8:c6:
         c1:5c:3b:85:f8:0c:91:a0:c1:93:b0:fd:13:46:b9:83:b2:c7:
         3f:fa:3b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:59:07 2025 by rpki-client